Static task
static1
Behavioral task
behavioral1
Sample
c79cbf37d2dbabfadb5c4aab386d86c39e644af124a6ba6b2b415b9f2f52ff59.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
c79cbf37d2dbabfadb5c4aab386d86c39e644af124a6ba6b2b415b9f2f52ff59.exe
Resource
win10v2004-20231023-en
General
-
Target
c79cbf37d2dbabfadb5c4aab386d86c39e644af124a6ba6b2b415b9f2f52ff59
-
Size
6.6MB
-
MD5
dac29d591dfc814efa6f08211cb17e18
-
SHA1
e50fd719f5461f0c65c8fc13fa77238a70994f32
-
SHA256
c79cbf37d2dbabfadb5c4aab386d86c39e644af124a6ba6b2b415b9f2f52ff59
-
SHA512
28babda40d3da5a627209629effa49e095d74dd15759e017869f26f1ee608b3acd6e6f8f4b8108b35f22c63aa5926925f3c9f6274907aaf3d016d9ede663e2cb
-
SSDEEP
98304:9IbwR6Y8JHyHKa3exaBZ5mKeaG1v4hOAf2V8:KbbY89y68BZ5vexsvfc8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c79cbf37d2dbabfadb5c4aab386d86c39e644af124a6ba6b2b415b9f2f52ff59
Files
-
c79cbf37d2dbabfadb5c4aab386d86c39e644af124a6ba6b2b415b9f2f52ff59.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ